Privacy Policy

01 Who We Are

8ace operates the online gaming platform accessible at https://8ace.app (the "Platform"). For the purposes of this Privacy Policy, 8ace acts as the personal information controller in respect of the personal data it collects from users in the Philippines and other permitted jurisdictions.

As a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 8ace is responsible for determining the purposes and means of processing your personal data. We are committed to handling your information with transparency, integrity, and in full compliance with applicable data protection laws.

If you have any questions about this Privacy Policy or how your data is handled, please refer to the contact details provided in Section 13 of this policy.

02 Personal Data We Collect

When you register for and use the 8ace platform, we collect various categories of personal data. The specific data collected depends on how you interact with our services:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming compliance (e.g., self-exclusion records) or as mandated by applicable law.

03 How We Collect Your Data

8ace collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or respond to surveys and promotions.
• Automated technologies: When you access the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for more details on our cookie practices.
• Third-party payment processors: When you make a financial transaction, our payment partners (such as GCash, PayMaya, and banking partners) may share transaction confirmation data with us to facilitate processing and fraud prevention.
• Identity verification providers: During KYC verification, we may use third-party identity verification services that process your government-issued ID and biometric data on our behalf, subject to strict data processing agreements.
• Publicly available sources: In limited circumstances, we may supplement your profile with information from publicly available sources for fraud prevention and compliance purposes.

04 Why We Use Your Personal Data

The 8ace platform uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the Platform.
• Service delivery: To provide you with access to games, process bets, calculate and pay out winnings, and deliver the full range of 8ace services.
• Payment processing: To process deposits and withdrawals securely via your chosen payment method, and to maintain accurate financial records.
• Legal and regulatory compliance: To comply with our obligations under Philippine law, including anti-money laundering (AML) requirements, PAGCOR regulations, and the Data Privacy Act of 2012. This includes verifying your age (21+) and identity.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit and loss limits, and identify players who may be at risk of problem gambling.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the 8ace platform.
• Marketing communications: To send you promotional offers, bonuses, and updates about 8ace — but only where you have given your consent to receive such communications. You may opt out at any time.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 8ace processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and 8ace — i.e., to provide you with the gaming services you have registered for.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate interests: Processing is necessary for the legitimate interests of 8ace, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Sharing Your Personal Data

8ace does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers and processors: We engage trusted third-party service providers to assist in operating the Platform, including payment processors, KYC verification providers, cloud hosting providers, and customer support platforms. These parties are bound by strict data processing agreements and may only use your data as instructed by 8ace.
• Regulatory and law enforcement authorities: We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory obligation.
• Fraud prevention and security: We may share data with fraud prevention agencies and industry partners to detect and prevent fraudulent activity, money laundering, and other illegal conduct.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 8ace's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
• With your consent: We may share your data with third parties in any other circumstances where you have given your explicit prior consent.

07 Cookies & Tracking Technologies

The 8ace platform uses cookies and similar technologies to enhance your experience, maintain session security, and gather analytics data. Here is a summary of the types of cookies we use:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Analytics cookies: We use analytics tools to understand how users interact with the Platform — such as which pages are visited most frequently and how long sessions last. This data is aggregated and anonymized where possible.
• Preference cookies: These cookies remember your settings and preferences (such as language and display options) to provide a more personalized experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 8ace platform. We do not use cookies to track your activity across unrelated third-party websites.

08 Data Retention

8ace retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with 8ace, and for a period of at least five (5) years following account closure, as required by AML and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine AML and tax regulations.
• KYC and identity verification documents: Retained for the duration of your account and for five (5) years after account closure.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, 8ace will securely delete or anonymize it in accordance with our internal data disposal procedures.

09 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 8ace:

To exercise any of these rights, please contact the 8ace Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

Please note that certain rights are subject to limitations under applicable law — for example, we may be unable to delete data that we are legally required to retain for AML or regulatory compliance purposes.

10 Data Security

8ace implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the 8ace platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized 8ace personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform's infrastructure.
• Secure data centers with physical access controls, redundancy, and disaster recovery capabilities.
• Staff training on data protection obligations and security best practices.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

11 Children's Privacy

The 8ace platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 8ace platform, please contact us immediately using the details in Section 13.

8ace employs age verification procedures at registration and during account review to enforce this restriction. Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms.

12 Changes to This Privacy Policy

8ace reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 8ace platform after any changes take effect constitutes your acceptance of the revised policy.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 8ace, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.

For general platform support, visit our FAQ page or our About Us page. For responsible gaming concerns, please visit our Responsible Gaming page.